149 matches found
Nemesis
Overview Nemesis is an open-source, centralized data processing platform that ingests, enriches, and allows collaborative analysis with humans and AI of files collected during offensive security assessments. Nemesis 2.0 is built on Docker with heavy Dapr integration, our goal with Nemesis was to...
CVE-2026-49086
camel-dapr 컨슈머 라우팅 헤더 재정의 / 혼동된 대리자 재현기 CVE-2026-49086 이 프로젝트는 Apache Camel의 camel-dapr 컴포넌트에서 라우팅 헤더 재정의confused-deputy 결함을 시연하며, CVE-2026-49086 로 추적됩니다. Dapr pub/sub 컨슈머DaprPubSubConsumer는 인바운드신뢰할 수 없는 CloudEvent의 필드를 Exchange 메시지 헤더로 복사합니다. 그중 두 개 — pubsubName과 topic — 는 프로듀서 방향 라우팅...
CVE-2025-71405 vulnerabilities
Vulnerabilities for packages: caddy, gogatekeeper, cloudflared, caddy-fips, gitness, rclone, rclone-fips, step, step-fips, tkn-fips, step-ca-fips, step-issuer-fips, tkn, dapr-fips, step-issuer, kyverno-policy-reporter-ui, step-ca, buf, telegraf, sftpgo, dapr, kyverno-policy-reporter-ui-fips, karm...
CVE-2026-84303 vulnerabilities
Vulnerabilities for packages: kubeflow, opentelemetry-collector-fips, amazon-cloudwatch-agent, blob-csi, gitlab-pages, kubernetes-csi-external-resizer, knative-eventing-fips, mcp-grafana-fips, kubernetes-csi-external-provisioner, gcp-compute-persistent-disk-csi-driver, fleet-server, bank-vaults,...
GHSA-QC2Q-P7WX-3PX3 vulnerabilities
Vulnerabilities for packages: kubeflow, opentelemetry-collector-fips, amazon-cloudwatch-agent, blob-csi, gitlab-pages, kubernetes-csi-external-resizer, knative-eventing-fips, mcp-grafana-fips, kubernetes-csi-external-provisioner, gcp-compute-persistent-disk-csi-driver, fleet-server, bank-vaults,...
GHSA-2V4P-QF9Q-27WJ vulnerabilities
Vulnerabilities for packages: kubernetes-csi-external-provisioner, aws-otel-collector, openbao, cerbos, grafana-image-renderer, kapp-controller, apisix-ingress-controller, tekton-chains, jitsucom-bulker, wal-g, secrets-store-csi-driver-provider-gcp, kyverno-notation-aws, gitlab-runner, spicedb,...
GHSA-QC2Q-P7WX-3PX3 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-external-provisioner, helm, gitlab-pages, knative-eventing, bank-vaults, aws-otel-collector, smarter-device-manager, flyte, kuma, lvm-driver, kserve, trillian, cerbos, ipfs-cluster, tekton-pipelines, dapr, amazon-cloudwatch-agent, cloudflared,...
CVE-2026-84303 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-external-provisioner, helm, gitlab-pages, knative-eventing, bank-vaults, aws-otel-collector, smarter-device-manager, flyte, kuma, lvm-driver, kserve, trillian, cerbos, ipfs-cluster, tekton-pipelines, dapr, amazon-cloudwatch-agent, cloudflared,...
CVE-2026-84445 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-external-provisioner, aws-otel-collector, openbao, cerbos, grafana-image-renderer, kapp-controller, apisix-ingress-controller, tekton-chains, jitsucom-bulker, wal-g, secrets-store-csi-driver-provider-gcp, kyverno-notation-aws, gitlab-runner, spicedb,...
GHSA-6C5V-HQJR-5XXP vulnerabilities
Vulnerabilities for packages: keda-fips, nuclio-controller-fips, falcosidekick-fips, bento, trufflehog-fips, opentelemetry-collector-contrib-fips, guac, nuclio-controller, minio, argo-events, argo-events-fips, minio-fips, versitygw, dapr-fips, sftpgo-plugin-pubsub, trufflehog, keda,...
GHSA-6C5V-HQJR-5XXP vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-pubsub, trufflehog, argo-events, keda, opentelemetry-collector-contrib, falcosidekick, bento, guac, telegraf, minio, dapr...
CVE-2026-79921 vulnerabilities
Vulnerabilities for packages: keda-fips, nuclio-controller-fips, falcosidekick-fips, bento, trufflehog-fips, opentelemetry-collector-contrib-fips, guac, nuclio-controller, minio, argo-events, argo-events-fips, minio-fips, versitygw, dapr-fips, sftpgo-plugin-pubsub, trufflehog, keda,...
CVE-2026-79921 vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-pubsub, trufflehog, argo-events, keda, opentelemetry-collector-contrib, falcosidekick, bento, guac, telegraf, minio, dapr...
GO-2026-4950 vulnerabilities
Vulnerabilities for packages: dapr...
GO-2026-6107 vulnerabilities
Vulnerabilities for packages: kubernetes, loki, cert-manager, minio, cilium-cli, hubble, cilium, reports-server, rancher-support-bundle-kit, external-dns, multicluster-controlplane, multicluster-controlplane-fips, kots, kube-conformance, kyverno, commercial-grafana, kine, dapr, milvus...
GO-2026-6107 vulnerabilities
Vulnerabilities for packages: kubernetes, cilium-cli, cilium, external-dns, kyverno, cert-manager, kine, hubble, kots, loki, minio, dapr...
GHSA-6VCH-Q96H-7GC3 vulnerabilities
Vulnerabilities for packages: kubernetes, cilium-cli, cilium, external-dns, kyverno, cert-manager, kine, hubble, kots, loki, minio, dapr...
CVE-2026-73500 vulnerabilities
Vulnerabilities for packages: kubernetes, cilium-cli, cilium, external-dns, kyverno, cert-manager, kine, hubble, kots, loki, minio, dapr...